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THE MAILING DATE OF THIS COMMUNICATION. 
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- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
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2a)D This action is FINAL. 2b)[EI This action is non-final. 
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closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
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DETAILED ACTION 

1. This action is in response to the communication filed on 09/25/2002. Claims 1 - 
26 were received for consideration. No preliminary amendments to the claims were 
filed. Claims 1 - 26 are currently being considered. 

2. An initialed and dated copy of Applicant's IDS form 1449, dated March 19, 2002 
is attached to the Office action. 

Claim Rejections - 35 USC §112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

Claim 25 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

The term "substantially" in claim 25 is a relative term which renders the claim 
indefinite. The term "substantially" is not defined by the claim, the specification does 
not provide a standard for ascertaining the requisite degree, and one of ordinary skill in 
the art would not be reasonably apprised of the scope of the invention. 
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Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 

form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

Claims 1 - 26 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Devine et al. (U.S. Patent Number 6,606,708). 

Regarding Claim 1 , Devine teaches and describes, a computer system for 
providing proxy firewall services for a computer network (Fig. 4, 9, 12, 13a, 13b and 
Column 6 line 38 - Column 10 line 27), comprising: 

a dispatch host computer, said dispatch host computer being connectable to an 
external network (Fig. 4 and Column 6 lines 38 - 43); and 

at least one load host computer coupled to said dispatch host computer, said at 
least one load host computer configured to provide proxy firewall services, said at least 
one load host computer being connectable to one or more application servers, wherein 
said connection from the external network is distributed from said dispatch host 
computer to a particular load host computer based on an analysis of the type of protocol 
of the connection (Fig. 4 and Column 9 lines 42 - 59). 
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Regarding Claim 10, Devine teaches and describes, a method of providing proxy 
firewall services for a computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - 
Column 10 line 27), comprising: 

identifying a set of load host computers, each load host computer in said set of 
load host computers being configured to provide proxy firewall services (Fig. 4, 9 and 
Column 9 line 42 - Column 10 line 67); 

monitoring one or more incoming ports at a dispatch host computer for a 
connection (Fig. 3 lines 27 - 40); 

upon identification of said connection, selecting from said set of load host 
computers a load host computer to which said connection should be forwarded based 
on an analysis of the type of protocol of said connection (Fig. 4; Column 9 lines 42 - 59; 
Column 13 lines 28 - 59 and column 24 line 66 - Column 25 line 67). 

Regarding Claim 17, Devine teaches and describes, a firewall network resource 
method (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27) comprising: 

identifying a resource intensive protocol (Fig. 4, 9; Column 9 line 42 - Column 10 
line 67 and Column 24 line 66 - Column 25 line 67); 

designating a load host computer for providing primary support for said resource 
intensive protocol (Column 9 line 24 - Column 10 line 67 and Column 13 line 30 - 
Column 14 line 37); and 
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routing a connection for said resource intensive protocol from a dispatch host 
computer to said designated load host (Column 7 lines 27 - 37; Column 9 line 24 - 
Column 10 line 67; Column 13 line 30 - Column 14 line 37 and Column 23 lines 17 - 
40). 

Regarding Claim 23, Devine teaches and describes, a method of expanding 
proxy firewall services for a computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 
38 - Column 10 line 27) comprising: 

receiving a connection at a dispatch host computer (Fig. 4, 9; Column 8 lines 22 
- 35; Column 10 lines 9-27 and Column 13 lines 60 - 65); 

selecting a first load host computer to which the connection should be forwarded; 
forwarding said connection to said first load host computer (Column 6 lines 38 - 43 and 
Column 23 lines 4 -16); 

connecting a second load host computer to said dispatch host computer; and 
updating a configuration tile on said dispatch host computer to reflect the connection of 
said second load host computer, wherein upon said updating, said second load host 
computer is available to process forwarded connections from said dispatch host 
computer (Column 7 lines 27 - 37; Column 23 lines 17-40 and Column 24 lines 44 - 
51). 



Claim 2 is rejected as applied above in rejecting claim 1. Furthermore, Devine 
teaches and describes a computer system for providing proxy firewall services for a 
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computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), 
wherein said dispatch host computer includes a monitoring element that listens for 
connections on multiple ports (Column 10 line 9 - 22; Column 22 lines 21 - 32 and 
Column 23 line 17 - Column 24 line 34). 

Claim 4 is rejected as applied above in rejecting claim 1. Furthermore, Devine 
teaches and describes a computer system for providing proxy firewall services for a 
computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), 
wherein at least one load host computer is protocol specific load host computer 
(Column 23 liens 17-40). 

Claim 5 is rejected as applied above in rejecting claim 1. Furthermore, Devine 
teaches and describes a computer system for providing proxy firewall services for a 
computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), 
wherein at least one load host computer can handle multiple protocols (Column 23 lines 
4-47). 

Claim 6 is rejected as applied above in rejecting claim 1. Furthermore, Devine 
teaches and describes a computer system for providing proxy firewall services for a 
computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), 
wherein said at least one load host computer and said dispatch host computer 
communicate information regarding the connecting of said at least one load host 
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computer to the computer system (Fig. 4 and Column 22 lines 6-30 and Column 24 
lines 7-43). 

Claim 9 is rejected as applied above in rejecting claim 1. Furthermore, Devine 
teaches and describes a computer system for providing proxy firewall services for a 
computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), 
wherein said dispatch host computer provides proxy firewall services (Column 21 lines 
21 -43). 

Claim 11 is rejected as applied above in rejecting claim 10. Furthermore, Devine 
teaches and describes, a method of providing proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), wherein 
said identifying comprises communicating information between said dispatch host 
computer and said load host computers relating to the availability of said load host 
computers (Column 10 lines 9 - 27). 

Claim 12 is rejected as applied above in rejecting claim 10. Furthermore, Devine 
teaches and describes, a method of providing proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), wherein 
said monitoring for a connection with a dispatch proxy that monitors one or more 
incoming ports on said dispatch host computer simultaneously (Column 10 lines 9 - 27). 
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Claim 13 is rejected as applied above in rejecting claim 10. Furthermore, Devine 
teaches and describes, a method of providing proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), wherein 
said selecting comprises selecting a load host computer based on a round robin load 
distribution among said load host computers (Column 23 lines 48 - 64). 

Claim 14 is rejected as applied above in rejecting claim 10. Furthermore, Devine 
teaches and describes, a method of providing proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), wherein 
said selecting comprises selecting a load host computer based on the availability of the 
load host computers (Column 9 line 42 - Column 10 line 67 and Column 23 lines 17 - 
37). 

Claim 15 is rejected as applied above in rejecting claim 10. Furthermore, Devine 
teaches and describes, a method of providing proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), wherein 
said selecting a load host computer based on the percentage of the total number of 
simultaneous proxied connections the load host computer can support (Column 9 lines 
22 - 35; Column 10 lines 9-27 and Column 23 lines 4 - 52). 

Claim 16 is rejected as applied above in rejecting claim 10. Furthermore, Devine 
teaches and describes, a method of providing proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), wherein 
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said selecting comprises selecting a load host computer that can support a resource 
intensive protocol (Fig. 4, 9; Column 9 line 42 - Column 10 line 67 and Column 24 line 
66 -Column 25 line 67). 

Claim 18 is rejected as applied above in rejecting claim 17. Furthermore, Devine 
teaches and describes, a firewall network resource method (Fig. 4, 9, 12, 13a, 13b and 
Column 6 line 38 - Column 10 line 27), further comprising processing on the dispatch 
host computer a connection for at least one protocol other than resource intensive 
protocol (Column 10 lines 9-27 and Column 13 lines 60 - Column 14 lines 32). 

Claim 19 is rejected as applied above in rejecting claim 17. Furthermore, Devine 
teaches and describes, a firewall network resource method (Fig. 4, 9, 12, 13a, 13b and 
Column 6 line 38 - Column 10 line 27), wherein said designated load host provides 
exclusive support for said resource intensive protocol (Column 9 line 42 - Column 10 
line 67 and Column 24 line 66 - Column 25 line 67). 

Claim 20 is rejected as applied above in rejecting claim 17. Furthermore, Devine 
teaches and describes, a firewall network resource method (Fig. 4, 9, 12, 13a, 13b and 
Column 6 line 38 - Column 10 line 27), wherein said designated load host is dedicated 
to said resource intensive protocol (Column 9 line 42 - Column 10 line 67 and Column 
24 line 66 - Column 25 line 67). 
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Claim 21 is rejected as applied above in rejecting claim 17. Furthermore, Devine 
teaches and describes, a firewall network resource method (Fig. 4, 9, 12, 13a, 13b and 
Column 6 line 38 - Column 10 line 27), further comprising: 

designating another load host for multi-purpose support (Fig. 4 Column 8 lines 22 

-35). 

Claim 22 is rejected as applied above in rejecting claim 17. Furthermore, Devine 
teaches and describes, a firewall network resource method (Fig. 4, 9, 12, 13a, 13b and 
Column 6 line 38 - Column 10 line 27), wherein said dispatch host computer has multi- 
purpose support (Fig. 14; Column 9 line 42 - Column 10 line 22). 

Claim 24 is rejected as applied above in rejecting claim 23. Furthermore, Devine 
teaches and describes, a method of expanding proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), wherein 
said updating comprises communicating information between said dispatch host 
computer and said second load host computer regarding the availability of said second 
load host computer (Fig. 14; Column 7 lines 27 - 37; Column 23 lines 17-40 and 
Column 24 lines 44 - 51). 

Claim 25 is rejected as applied above in rejecting claim 23. Furthermore, Devine 
teaches and describes, a method of expanding proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), wherein 
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said forwarding, said connecting, and said updating occur substantially simultaneously 
(Column 10 lines 9-27 and Column 24 lines 19 - 26). 

Claim 26 is rejected as applied above in rejecting claim 23. Furthermore, Devine 
teaches and describes, a method of expanding proxy firewall services for a computer 
network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 -Column 10 line 27), wherein 
said connecting and said updating occur during the provision of proxy firewall services 
(Column 24 lines 19-26). 

Claim 3 is rejected as applied above in rejecting claim 2. Furthermore, Devine 
teaches and describes a computer system for providing proxy firewall services for a 
computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), 
wherein said monitoring element is a dispatch proxy (Fig. 9, Column 10 lines 9 - 22). 

Claim 7 is rejected as applied above in rejecting claim 6. Furthermore, Devine 
teaches and describes a computer system for providing proxy firewall services for a 
computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), 
wherein said dispatch host computer includes a configuration file with information 
relating to any load host computers in the computer system (Column 23 lines 17-47 
and Column 24 lines 35 - 43). 
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Claim 8 is rejected as applied above in rejecting claim 7. Furthermore, Devine 
teaches and describes a computer system for providing proxy firewall services for a 
computer network (Fig. 4, 9, 12, 13a, 13b and Column 6 line 38 - Column 10 line 27), 
wherein upon the connection of another load host computer to the computer system, 
said configuration file is updated to reflect the availability of said another load host 
computer in the computer system (Column 23 lines 1 7 - 47). 

Conclusion 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks, Washington, D.C. 20231 or 
faxed to: (703) 872-9306 for all formal communications. 
Hand-delivered responses should be brought to Crystal Park II, 2121 Crystal 
Drive, Arlington, VA, Fourth Floor (Receptionist). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Pramila Parthasarathy whose telephone number is 703- 
305-8912. The examiner can normally be reached on 8:00a.m. To 5:00p.m.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 703-305-9648. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 
3900. 
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